Ticket Heist fraud gang uses 700 domains to sell fake Olympics tickets

Quo Intelligence has put out a report detailing a massive fraud campaign run by a group known as Ticket Heist that has over 700 domain names is likely targeting Russian-speaking users looking to purchase tickets for the Summer Olympics in Paris among other events:

Our main takeaways and key findings in this article include:

  • As of July 2024, QuoIntelligence identified 708 domains linked with Ticket Heist campaign targeting mainly Russian-speaking individuals across the globe.
  • The Olympic Games Paris 2024 and UEFA EURO 2024 events are at the highest level of risk at the time of reporting given multiple domains part of Ticket Heist luring users into buying tickets from untrusted and unofficial platforms.
  • The impacts of such campaign are multifaceted, impacting both individuals and event organizers with financial losses, reputational damage and loss of trust.
  • The fraudulent ticket sales extend beyond sporting events to various activities, including musical festivals featuring famous musicians.

Rogier Fischer, CEO, Hadrian had this to say:

Major sporting events have always been the targets of cybercriminals, with motives ranging from the trivial to the critical, noted Rogier Fischer, CEO of Netherlands-based cybersecurity service Hadrian.”Hackers targeted the Winter Olympics 2018 in Pyeongchang, causing disruptions during the opening ceremony as retaliation for Russia’s ban due to doping, while in 2009, a hacker intercepted the Super Bowl XLIII broadcast, just to air inappropriate content,” he explained.In the case of large public events, we expect the organizers to enhance network security with regular audits, secure Wi-Fi networks, and multi-factor authentication etc. However, when it comes to scams like these, the real defence lies with the end user, he said.”Always use official sources for purchases, enable multi-factor authentication, and be cautious of unsolicited offers, ensuring you regularly check for unauthorized transactions. To spot fake offers, verify the URL, look for comprehensive contact information, assess website quality, search for reviews, and ensure the website accepts secure payment methods,” he suggested.

All of this is good advice as the only way that you can be caught out by one of these campaigns is to not be on your toes in terms of looking out for them.

Leave a Reply

Discover more from The IT Nerd

Subscribe now to keep reading and get access to the full archive.

Continue reading